Re: LDAP - guacConfigParameter only possible once

[Nick Couchman <vn...@apache.org>]

On Fri, Mar 30, 2018 at 1:27 PM, EagleEye <a....@web.de> wrote:

> Hi Mike,
>
> I am using following LDAP Server:
>
> @(#) $OpenLDAP: slapd  (Apr 14 2017 14:01:06) $
>
> buildd@bm-wb-03:/build/openldap-pdyzMj/openldap-2.4.
> 40+dfsg/debian/build/servers/slapd
>
> The LDIF in question looks like this one:
>
> dn: cn=windows,ou=guacamole,ou=Groups,dc=example,dc=net
> objectClass: guacConfigGroup
> objectClass: groupOfNames
> objectClass: top
> cn: windows
> guacConfigProtocol: rdp
> guacConfigParameter: hostname=windows
> guacConfigParameter: security=tls
> guacConfigParameter: server-layout=de-de-qwertz
> member: cn=user,ou=People,dc=example,dc=net
>

If you're trying to modify an existing entry, this LDIF is probably wrong -
you need some sort of operation for the guacConfigParameter attributes -
add, replace, etc.  So, if you're adding multiple guacConfigParameter
attributes, it might be something like this:

dn: cn=windows,ou=guacamole,ou=Groups,dc=example,dc=net
changetype: modify
add: guacConfigParameter
guacConfigParameter: security=tls
-
add: guacConfigParameter
guacConfigParameter: server-layout=de-de-qwertz

...something like that.  It's also possible that Apache Directory Studio
isn't 100% compatible with administering slapd servers, so it may be trying
to perform the operation in such a way that slapd doesn't like.

In any case, this doesn't seem to be an issue with the Guacamole schema or
anything like that.

-Nick